Several domains including New York Times and Twitter ones attacked by Syrian Electronic Army

Get the latest security news in your inbox.

During the last few hours several domains including the one from The New York Times have been redirected to a Syrian Electronic Army server. Here is the list of domains pointing to that server:

Returned 39 RRs in 1.50 seconds.
sokiland.fr.nf. A 141.105.64.37
sea.sy. A 141.105.64.37
m.sea.sy. A 141.105.64.37
mob.sea.sy. A 141.105.64.37
www.mob.sea.sy. A 141.105.64.37
leaks.sea.sy. A 141.105.64.37
www.leaks.sea.sy. A 141.105.64.37
storm-paradize.us. A 141.105.64.37
www.storm-paradize.us. A 141.105.64.37
dns1.storm-paradize.us. A 141.105.64.37
dns2.storm-paradize.us. A 141.105.64.37
storm-paradize.biz. A 141.105.64.37
ns1.storm-paradize.biz. A 141.105.64.37
ns2.storm-paradize.biz. A 141.105.64.37
sea.twimg.com. A 141.105.64.37
sea2.twimg.com. A 141.105.64.37
nytimes.com. A 141.105.64.37
sea.nytimes.com. A 141.105.64.37
sea4.nytimes.com. A 141.105.64.37
sharethis.com. A 141.105.64.37
w.sharethis.com. A 141.105.64.37
qatar-leaks.com. A 141.105.64.37
www.qatar-leaks.com. A 141.105.64.37
perfectpsyche.com. A 141.105.64.37
storm-paradize.com. A 141.105.64.37
www.storm-paradize.com. A 141.105.64.37
syrianelectronicarmy.com. A 141.105.64.37
ns1.syrianelectronicarmy.com. A 141.105.64.37
ns2.syrianelectronicarmy.com. A 141.105.64.37
www.syrianelectronicarmy.com. A 141.105.64.37
leaks.syrianelectronicarmy.com. A 141.105.64.37
zonemu.net. A 141.105.64.37
landesmusic.net. A 141.105.64.37
storm-paradize.net. A 141.105.64.37
storm-paradize.org. A 141.105.64.37
www.storm-paradize.org. A 141.105.64.37
ideal-dimension.org. A 141.105.64.37
www.ideal-dimension.org. A 141.105.64.37
dim-mag.ideal-dimension.org. A 141.105.64.37

We can find the domain nytimes.com in the list as well as some Twitter domains such as twimg.com. As we can see in the whois data for twimg.com:

About the Author:Jaime BlascoJaime Blasco is a renowned Security Researcher with broad experience in network security, malware analysis and incident response. At AlienVault, Jaime leads the Lab Intelligence and Research team that leads the charge of researching and integrating threat intelligence into detection mechanisms. Prior to working at AlienVault he founded a couple of startups (Eazel, Aitsec) working on web application security, source code analysis and incident response. He is based in San Francisco. Jaime's work in emerging threats and targeted attacks is frequently cited in international publications such as New York Times, BBC, Washington Post and Al Jazeera.
Read more posts from Jaime Blasco ›